Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File: z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier: wkyMbNUPKNxVCKTU0bwOOY5uMOEKkzNGJnozV/Qke00=
Subject key identifier: 93:70:DA:F0:1F:F6:45:62:B4:33:F3:B2:BE:F5:83:9E:F7:0A:6A:A3
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer: /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial: 0196BB2451AA4678A60C1F615A7B1B970BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number: 0233
Signing time: Sat 10 May 2025 17:00:41 +0000
Manifest this update: Sat 10 May 2025 17:00:41 +0000
Manifest next update: Sun 11 May 2025 17:00:41 +0000
Files and hashes: 1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: Gf3nORQGsKZ8pPpptRQzEMX+LxB3p9OxuPJaks5pdZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:51:aa:46:78:a6:0c:1f:61:5a:7b:1b:97:0b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Validity
Not Before: May 10 17:00:41 2025 GMT
Not After : May 11 17:00:41 2025 GMT
Subject: CN=9370daf01ff64562b433f3b2bef5839ef70a6aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:13:a2:7e:35:6c:40:eb:5d:29:b8:82:d8:
74:d5:10:8a:9a:ae:54:4d:23:f9:7a:71:d4:62:3b:
d6:3b:45:ac:db:bc:81:5e:75:97:45:d6:2f:78:92:
25:4b:ef:c6:ae:e4:eb:e0:dd:ef:ef:e0:93:fe:b5:
39:cd:c1:2a:4d:04:c2:eb:e1:ac:e7:01:db:b1:4f:
03:f4:81:c1:25:f4:94:8b:80:6e:f6:1e:23:4e:ee:
96:f2:c8:81:59:c8:20:e8:8f:b0:9b:0b:17:e5:ad:
9f:b7:ec:4f:f1:8b:28:83:07:22:4b:2e:81:e2:15:
86:d3:52:ae:26:b5:bd:52:9f:9f:83:09:18:a1:8f:
69:b6:47:98:9d:16:68:58:71:20:f0:e1:ba:0c:69:
3d:e9:ba:cb:fc:62:72:5c:af:1f:ab:3b:ed:c1:2f:
61:aa:77:e5:2a:80:e3:d6:51:e6:fc:55:68:c0:91:
78:37:25:42:bb:83:f6:28:1a:e7:e1:a5:e8:73:00:
e2:01:a1:3f:c9:92:4a:88:00:93:a7:dc:6b:18:02:
4d:51:4b:c0:05:9a:57:0e:2c:cd:50:09:f7:f9:fa:
d6:e8:cf:ab:83:b4:fb:c4:14:cd:30:76:50:64:7f:
74:80:a7:de:db:96:37:76:26:3f:22:d0:c2:ed:e8:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:DA:F0:1F:F6:45:62:B4:33:F3:B2:BE:F5:83:9E:F7:0A:6A:A3
X509v3 Authority Key Identifier:
keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:67:23:42:99:58:15:ec:a8:41:cb:97:1f:a4:9d:e5:ae:
13:e4:4e:b2:38:a8:54:61:d3:01:1a:19:81:02:a2:5d:9c:ac:
79:3d:fb:e1:8a:ce:45:c9:e6:08:8f:f6:7e:ec:5d:46:99:ca:
bb:4e:af:d5:bd:91:03:ed:00:f7:9d:6e:56:95:cb:aa:d7:b9:
86:00:f8:e9:3a:24:d7:8d:65:70:97:43:b8:d7:4c:22:80:f0:
52:28:42:ae:33:d9:a4:92:6f:0a:ac:92:ed:39:87:6b:70:42:
29:e3:33:db:cf:b5:8e:52:76:89:2d:0c:af:13:15:02:4d:99:
54:4a:8d:94:78:12:18:e8:c4:94:3f:56:34:ad:ae:ce:20:1d:
58:ae:9e:e4:fb:40:59:d0:6a:44:3b:7d:1a:9b:38:18:a0:d5:
b7:ae:4f:e2:f7:ea:07:1f:f1:51:47:63:f1:3e:42:ba:c0:b1:
6a:e6:b3:33:67:7f:d8:b5:dc:f9:21:f7:dc:4b:46:5c:03:05:
cf:20:fc:86:25:67:95:a5:2a:4e:25:b9:81:a1:00:e8:a6:35:
fb:3b:fe:ce:9c:98:9e:fa:fc:4f:52:7a:67:52:6a:22:72:a2:
23:7c:9a:03:4b:ba:a1:63:07:f5:a4:e3:f4:5e:8e:82:65:45:
a6:a9:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:39:04 2025 by rpki-client